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DETAILED ACTION 

1 . This office action is responsive to communications filed on October 15, 2009. 
Claims 1-4, 6-20, 22-34, 36-39 and 41-46 have been amended. Claims 1-4, 6-20, 22- 
34, 36-39 and 41-46 are pending in the application. 

Claim Rejections - 35 USC § 103 

The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

2. Claims 1-4, 6-20, 22-34, 36-39, and 41-44 are rejected under 35 U.S.C. 103(a) 
as being unpatentable over Black et al. (USPN 7,143,153) (hereinafter Black) in view of 
Nisbet et al. (USPN 6,834,304) (hereinafter Nisbet), Crooks et al. (USPN 6,088,688) 
(hereinafter Crooks) and Burgess et al. (USPN 5,796,633) (hereinafter Burgess). 

3. Referring to claim 1 , Black discloses a method of monitoring and diagnosing 
resource utilization within a connection oriented network made of network elements (i.e. 
ATM network) (e.g. abstract; col. 28, lines 40-55) and a connection resource tracker 
(the phrase "for maintaining a database of resource utilization" is a statement of 
intended use and holds no patentable weight) (i.e. the system describes an alarm which 
notifies a user when a particular attribute exceeds a threshold and then only if it remains 
over that threshold for a particular number of sampling periods, thereby inherently 
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requiring the system to store the previously sampled resource utilizations), comprising 
the steps of: 

specifying a plurality of resource types for the network elements of the network 
being defined by a capacity and a utilization (i.e. group similar devices together for a 
particular threshold group) (col. 170, lines 25-49); 

providing a utilization threshold set at a high level for a each type of resources 
(i.e. threshold level for the particular group) (the phrase "used to determine whether 
resources are being over-utilized" is a statement of intended use and therefore holds no 
patentable weight) (col. 170, lines 25-49); 

measuring the utilization of all resources at a network element (i.e. monitor 
network resource attributes) (col. 167, lines 15-25); 

determining if the utilization of the resource is above the utilization threshold (i.e. 
triggers threshold violation) (col. 167, lines 25-65); and 

generate a report of the threshold violators and send this report to a particular 
operator (i.e. user is notified as to the particular threshold violations) (col. 173, lines 9- 
20). 

Black does not specifically disclose that the determination and generation of the 
report is done in response to a user's request, rather it is done periodically, and the use 
of a "specified threshold", which checks a timer and will send an alarm if the level is 
ablvoe the threshold for the length of the timer. However, Black further discloses that a 
user is able to generate a plurality of rules to monitor the health of the system (col. 167, 
line 65), that a sampling timer is utilized to determine when to periodically sample the 



Application/Control Number: 10/670,257 Page 4 

Art Unit: 2446 

attribute (col. 169, lines 27-41), and notifying a user (i.e. generating an alarm) when a 
particular attribute exceeds a particular threshold for a particular number of sampling 
periods (col. 169, lines 20-27). One of ordinary skill in the art could clearly create the 
claimed "specified threshold" (the phrase "used to determine whether resources used 
are exceeding a maximum allowable limit" is a statement of intended use and therefore 
hold no patentable weight) rule and then set a specified time limit for which to be 
notified using the "sampling frequency" and sampling periods values in the threshold 
rules (i.e. if the user wants to be notified if the "bandwidth" threshold is exceeded for 30 
seconds, the user can set the sampling frequency to 5 seconds, and then set the 
threshold rule to notify the user if the threshold is exceeded for 6 sampling periods). 
One of ordinary skill in the art would have been motivated to create this rule in the 
system of Black in order to tailor the system to the user's liking. 

In analogous art, Nisbet discloses another method of monitoring resource 
utilization with in a network (e.g. abstract) which discloses creating a network audit 
report which reads a network element file and compares parameters of the element with 
the threshold values and if they are out of the bounds of the threshold, create a file 
which holds the parameters which are out of a valid range for the particular element 
(e.g. abstract). It would have been obvious to one of ordinary skill in the art to combine 
the teaching of Black with Nisbet in order to utilize Nisbet's audit report with the 
monitoring capabilities of Black in order to determine if the network elements of Black 
are ready for a network reconfiguration or upgrade as supported by Nisbet (col. 2, lines 
5-10). 
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Black does not specifically state that the resource utilization comparison is from a 
resource utilization database. In, analogous art, Crooks discloses another resource 
tracking system which receives resource usage information into a host computer for 
report generation (e.g. abstract). It would have been obvious to one of ordinary skill in 
the art to incorporate the resource usage database of Crooks with the threshold 
utilization system of Black in order for the threshold monitoring system can use this 
database information to be used for various rules, thereby providing more flexibility for 
the user as to what threshold rules may be applied. 

Black does not specifically state that the timer associated with the resource is 
reset after an alarm has been generated for the resource. However, Burgess teaches 
resetting a timer after an alarm has been generated (col. 13, lines 44-51 & col. 13, lines 
53-55). As shown in Fig. 7, after an alert is generated in step 128, flow returns to step 
120 where the timer is reset. Burgess also teaches that if the utilization is above the 
corresponding specified threshold for at least one said resource, checking whether a 
flag associated with the resource indicates that an alarm has recently been generated 
for the resource and, if the flag does not indicate that the alarm has recently been 
generated, generating an alarm and setting a flag to indicate that an alarm has recently 
been generated (col. 13, lines 44-51 & col. 13, lines 53-60). It would have been obvious 
to one of ordinary skill in the art at the time the invention was made to modify Black to 
reset a timer after an alarm has been generated and to check whether a flag indicates 
that an alarm has recently been generated. Motivation for doing so would be to prevent 
the same alarm being generated twice. 
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4. Referring to claim 2, Black discloses the resource includes bandwidth (i.e. Rx 
and Tx traffic) (Figure 68, resource ID no. 7312). 

5. Referring to claim 3, Black discloses providing a list of resources, and wherein 
the step of determining whether a utilization of a resource is above the corresponding 
utilization threshold is carried out only with respect to resources within the list of 
resources (this is an inherent feature, since the switch would not check resources which 
the administrator does not care about, since they are not in the threshold table, they 
would not be checked) (Figure 68). 

6. Referring to claim 4, Black discloses the threshold is provided from an operator 
(col. 167, line 65 to col. 168, line 14). 

7. Referring to claim 5, Black discloses generating a report (the Office construes 
"report" as any notice which will identify a resource with any information, such as an 
SNMP trap) including any identified resources and presenting the report to an operator 
(i.e. report threshold events to SNMP manager, which sends an SNMP trap, which 
notifies the NMS client, which displays a notice to the user through GUI 895) (col. 169, 
lines 40-50). 
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8. Claims 6, 8-10 are rejected for similar reasons as stated above. Furthermore 
Black discloses generating an alarm (i.e. SNMP trap) (col. 169, lines 40-50). 

9. Referring to claim 7, Black discloses the invention substantively as described in 
claim 5. Black does not explicitly state that the report includes the utilization of any 
identified resources in the report, rather a notice is sent to the user, however this 
information would be easily sent via an SNMP trap. By this rationale, "Official Notice" is 
taken that both the concepts and advantages of providing for the utilization of any 
identified resource in the report is well known and expected in the art. It would have 
been obvious to one of ordinary skill in the art to modify the teaching of Black to include 
the resource utilization level in the report in order to provide valuable information to the 
administrator for effectively managing the network. 

1 0. Referring to claim 1 1 , Black discloses determining whether a utilization of a 
resource is above the corresponding utilization threshold and the step of identifying 
each such resource are carried out repeatedly (i.e. sampling frequencies) (col. 169, 
lines 27-40). 

1 1 . Referring to claim 1 2, Black discloses pausing after the step of identifying each 
resource (i.e. the sampling frequency is a periodic check, and therefore it will pause 
until the next time the resource must be checked) (col. 169, lines 27-40). 
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12. Referring to claim 13, Black discloses the invention substantively as described in 
claim 9. Black does not explicitly state that the switch monitors the receipt of call 
connection establishment signals and does the determination only upon receipt of a call 
connection establishment signal, however this is a well known event triggered 
determination. By this rationale, "Official Notice" is taken that both the concepts and 
advantages of providing for checking the utilization threshold only upon receipt of an 
establishment signal is well known and expected in the art. It would have been obvious 
to one of ordinary skill in the art to modify the system of Black to include in the sampling 
frequency list a choice of 'on receipt of an establishment signal' in order to eliminate 
needless checking of values which would not change if there is no call connection 
signals, thereby reducing overhead processing of the device. 

13. Referring to claim 14, Black discloses the invention substantively as described in 
claim 13. Black does not explicitly state that an alarm is generated only when an alarm 
has not been generated since the utilization of the resource last rose above the 
threshold, however this is a well known technique in order to reduce redundant alarms. 
By this rationale, "Official Notice" is taken that both the concepts and advantages of 
providing for generating an alarm only when an alarm has not been generated is well 
known and expected in the art. It would have been obvious to one of ordinary skill in 
the art to modify the teaching of Black to include alarm suspensions in order to reduce 
the likelihood of flooding a particular management computer with redundant alarms, 
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thereby reducing overhead processing of the management server as well as reducing 
bandwidth congestion in the network. 

14. Claims 15-22, 23-28, and 29-46 are rejected for similar reasons as stated above. 
Furthermore Black discloses that the system can identify resources that are below the 
corresponding utilization threshold (i.e. if attributed) (col. 169, lines 1-10). 

Response to Arguments 

15. Applicant's arguments filed on October 15, 2009 have been fully considered but 
they are not persuasive. 

16. On pages 1 8-1 9 of the remarks, Applicant argues "Independent claim 1 recites, 
in part, the following subject matter: 'generating an alarm for the resource and 
resetting the timer associated with the resource only when the alarm has been 
generated for the resource' (emphasis added). Similar subject matter appears in 
independent claims 17, 33, and 45. As described in the specification, resetting the timer 
when an alarm is generated ensures that the connection resource tracker will not 
generate repeated alarms for a resource in response to a future query from a user. 
Applicant respectfully submits that the references of record, alone or in combination, fail 
to disclose, suggest, or teach this subject matter." 

Examiner disagrees. At Col. 13, lines 53-55, Burgess states "If a value has 
reached an alertable level, then in step 128 alert thread 48 generates an alert event". 
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Thus, an alarm is generated for a resource. As shown in Fig. 7, after the alert is 
generated in step 128, flow proceeds to step 130 which ultimately leads to step 120 
where the timer is reset ("in step 120 with the interval timer being reset"- See Col. 13, 
lines 52-53; "In step 120, an interval timer is set to a predefined interval"- See Col. 1 3, 
lines 42-43). Thus, the timer associated with the resource is reset after an alarm is 
generated. 

1 7. On page 1 9 of the remarks, Applicant further argues "However, Applicant 
respectfully submits that Burgess only discloses the use of a log capture thread [Fig. 3: 
46]. While Burgess does describe avoidance of 'sending alerts out twice' in line 58 of 
col. 13, Burgess does not prevent generation of repeated alarms. Instead, as disclosed 
in lines 58-59 of col. 13, the log capture thread of Burgess automatically filters out any 
alert events that were placed in the local event log. Thus, because Burgess still permit 
repeated alerts to be generated , only filtering such alerts out of the local event log after 
they have been generated, Applicant respectfully submits that Burgess clearly fails to 
disclose, teach, or suggest the recited subject matter." 

Examiner disagrees. In response to Applicant's assertion that Burgess does not 
"prevent generation of repeated alarms", this is not a feature that is recited in the claims. 
Although the claims are interpreted in light of the specification, limitations from the 
specification are not read into the claims. See In re Van Geuns, 988 F.2d 1 181 , 26 
USPQ2d 1057 (Fed.Cir. 1993). 
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18. On pages 1 9-20 of the remarks, Applicant argues "Independent claim 34 recites, 
in part, the following subject matter: 'if the utilization is above the corresponding 
specified threshold for at least one said resource, checking whether a flag associated 
with the resource indicates that an alarm has recently been generated for the resource; 
and wherein if the flag does not indicate that the alarm has recently been set, a step of 
generating the alarm is carried out and the flag is set to indicate that the alarm has 
recently been generated .' Similar subject matter appears in independent claims 39, 
44, and 46. As described in the specification, if the flag does not indicate that the alarm 
has been set, then the connection resource tracker generates an alarm and sets the 
flag to indicate the alarm has recently been generated; otherwise an alarm is not 
generated. Applicant respectfully submits that the references of record, alone or in 
combination, fail to disclose, suggest, or teach this subject matter. Section 1 6 of the 
Office Action indicates that independent claims 34, 39, 44, and 46 are rejected for the 
'same reasons as stated above.' Applicant notes, however, that these claims relate to 
use of a flag to avoid repeated generation of alarms, not a timer. Because the Office 
Action fails to provide any articulated reasoning regarding obviousness of claims 
reciting a flag, Applicant respectfully submits that the Office Action is facially deficient 
with respect to these claims." 

The "flag" feature was addressed on page 6 of the Office Action dated 8/18/2009. 
With respect to the limitation "if the utilization is above the corresponding specified 
threshold for at least one said resource, checking whether a flag associated with the 
resource indicates that an alarm has recently been generated for the resource; and 
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wherein if the flag does not indicate that the alarm has recently been set, a step of 
generating the alarm is carried out and the flag is set to indicate that the alarm has 
recently been generated", Col. 13, lines 44-51 & Col. 13, lines 53-60 of Burgess were 
cited. In particular, Col. 13, lines 53-55 describe an event log. In Col. 13, lines 53-55, 
Burgess describes an alert being generated in response to an event being added to the 
log "If a value has reached an alertable level, then in step 128 alert thread 48 generates 
an alert event and sends it to the local event log maintained by operating system 64." In 
further detail with respect to the event log, Burgess states "Log capture thread 46 
monitors the event log for new events. If a new event is posted to the event log, log 
capture thread 46 will process that event" in Col. 6, lines 22-24. Finally, Burgess 
discloses "Then, in step 130, alert thread 48 generates an appropriate message 
regarding the alert and places it in event queue 52". Once the alert is in the message 
queue, it is processed according to Fig. 9. 

The "flag" associated with a particular event relates to whether the event is new. 
Based on the above, an event is only processed when it is new. Alert thread generates 
an event when a performance value exceeds a certain threshold and sends the event 
to the event log. Log capture thread monitors the event log for new events. If an event 
is new, it means that a corresponding alert has not yet been generated since the event 
would just have been received in the event log. Since only new events are processed 
by the log capture thread, it means that alerts are not generated for old events. 
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Conclusion 

19. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Scott M. Sciacca whose telephone number is (571) 270- 
1919. The examiner can normally be reached on Monday thru Friday, 7:30 A.M. - 5:00 
P.M. EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Jeff Pwu can be reached on (571 ) 272-6798. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/Scott M. Sciacca/ 
Examiner, Art Unit 2446 

/Jeffrey Pwu/ 

Supervisory Patent Examiner, Art Unit 2446 



